axios 如何修复Laravel 8 Sanctum和VueJS 3中的“401 Unauthorized”错误?

yqkkidmi  于 8个月前  发布在  iOS
关注(0)|答案(4)|浏览(77)

我有一个Laravel 8项目,前端有VueJS 3,我在本地主机上运行它
我使用Sanctum进行身份验证。
登录和注册过程工作正常,但当我去一个 Jmeter 板,我试图添加一些东西到我的数据库,它给我的401 Unauthorized错误。

Laravel:
*编辑:UserController

public function login(Request $request)
    {
        $credentials = [
            'email' => $request->email,
            'password' => $request->password,
        ];

        if (Auth::attempt($credentials)) {
            $success = true;
            $user = User::where('email', $credentials['email'])->first();
            $token = $user->createToken("authToken")->plainTextToken;
        } else {
            $success = false;
        }

        $response = [
            'success' => $success,
            'access_token' => $token,
        ];
        return response()->json($response);
    }

字符串

web.php

Route::get('/{any}', function () {
    return view('welcome');
})->where('any', '.*');

API.php

// Auth
Route::post('login', [UserController::class, 'login']);
Route::post('register', [UserController::class, 'register']);
Route::post('logout', [UserController::class, 'logout'])->middleware('auth:sanctum');

// Niveau
Route::group(['prefix' => 'niveaux', 'middleware' => 'auth:sanctum'], function () {
    Route::get('/', [NiveauScolaireController::class, 'index']);
    Route::post('add', [NiveauScolaireController::class, 'add']);
    Route::get('edit/{id}', [NiveauScolaireController::class, 'edit']);
    Route::post('update/{id}', [NiveauScolaireController::class, 'update']);
    Route::delete('delete/{id}', [NiveauScolaireController::class, 'delete']);
});

cors.php

'paths' => ['api/*', 'sanctum/csrf-cookie'],
'allowed_methods' => ['*'],
'allowed_origins' => ['*'],
'allowed_origins_patterns' => [],
'allowed_headers' => ['*'],
'exposed_headers' => [],
'max_age' => 0,
'supports_credentials' => true,

sanctum.php

'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
    'SANCTUM_STATEFUL_DOMAINS',
    'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
    env('APP_URL') ? ',' . parse_url(env('APP_URL'), PHP_URL_HOST) : ''
))),

session.php

'domain' => env('SESSION_DOMAIN', null),


这就是我为Laravel设置的。

VueJS
app.js

import { createApp } from "vue";
import App from "./App.vue";
import router from "./Router/index";
import axios from "axios";
const app = createApp(App);
app.config.globalProperties.$axios = axios;
app.use(router);
app.mount("#app");

bootsrap.js

window.axios = require("axios");
window.axios.defaults.headers.common["X-Requested-With"] = "XMLHttpRequest";
windoow.axios.defaults.withCredentials = true;

登录组件

this.$axios.get("/sanctum/csrf-cookie").then((res) => {
    this.$axios
        .post("api/login", {
              email: this.email,
              password: this.password,
        })
        .then((res) => {
            if (res.data.success) {
                this.$router.push({ name: "Dashboard" });
            } else {
                console.log("Error: " + res.data.message);
            }
        })
        .catch(function (error) {
            console.log("error :>> ", error);
        });
    });


在这里,我对sanctum/csrf-cookie的请求进行得很顺利,我会收到Cookie,登录工作正常,它从数据库中获取用户,然后将我重定向到 Jmeter 板。

问题

现在,当我尝试向(api/niveaux/add)发送请求时,请求被发送,但我得到一个401 Unauthorized错误和一个{"message":"Unauthenticated."}响应。

** Jmeter 板组件**

this.$axios
    .post("api/niveaux/add", {
        nom: this.niveau,
    })
    .then((res) => {
        if (res.data.success) {
            alert(res.data.message);
        } else {
            alert(res.data.message);
        }
    })
    .catch(function (error) {
        console.log("error :>> ", error);
    });

vmjh9lq9

vmjh9lq91#

你需要给你发送access_token在每一个请求有middleware('auth:sanctum')在laravel.你可以找到access_token在你得到的cookie后登录.(可能有不同的名称像token

axios.defaults.headers.common['Authorization'] = `Bearer ${access_token}`

字符串

axios.defaults.headers.common['Authorization'] = `${access_token}`


必须要做的把戏

nafvub8i

nafvub8i2#

我认为你是通过localhost端口8000访问的,但是在sanctum config下的有状态参数中,没有localhost:8000。配置使用$_SERVER ['SERVER_NAME'],所以它实际上在访问时会查找确切的内容。

sanctum.php

'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
    'SANCTUM_STATEFUL_DOMAINS',
    'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
    'localhost:8000',
    env('APP_URL') ? ',' . parse_url(env('APP_URL'), PHP_URL_HOST) : ''
))),

字符串

1yjd4xko

1yjd4xko3#

注意到这里有一个错字:

window.axios = require("axios");
window.axios.defaults.headers.common["X-Requested-With"] = "XMLHttpRequest";
windoow.axios.defaults.withCredentials = true;

字符串
最后一个“windoow”拼错了。

yc0p9oo0

yc0p9oo04#

当我遇到这种情况时,我跟踪并比较了现有工作项目的更改

'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
    'SANCTUM_STATEFUL_DOMAINS',
    'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
    env('APP_URL') ? ',' . parse_url(env('APP_URL'), PHP_URL_HOST) : ''
))),

字符串
config/sanctum.php中的代码已经被更改,我只是用旧代码替换它

'stateful' => explode(',', env(
    'SANCTUM_STATEFUL_DOMAINS',
    'localhost,127.0.0.1,127.0.0.1:8000,::1,' . parse_url(env('APP_URL'), PHP_URL_HOST)
)),

相关问题